CVE-2022-20214: Google Android

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Affected products

• Google Android: version 10.0 only; version 11.0 only; version 12.0 only

Published 2023-01-26. Last modified 2026-06-17.